$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/419e6335-6ee8-3c7f-842f-c26843e0a487.roa File: 419e6335-6ee8-3c7f-842f-c26843e0a487.roa (raw, json) Hash identifier: 8EjaZVFCgjuZJSptGnzvzs5oyW75D1i09w4gnP7Hzxs= Subject key identifier: DC:90:A0:17:1D:EA:C8:10:A8:E1:98:D8:F8:6A:60:D3:3D:03:AD:DF Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584BDCF5E55A5F8C5D59DFC08080 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/419e6335-6ee8-3c7f-842f-c26843e0a487.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 174 IP address blocks: 199.1.64.0/24 maxlen: 24 199.1.65.0/24 maxlen: 24 199.1.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:e5:5a:5f:8c:5d:59:df:c0:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=437346ed-e78d-475b-b398-00d3a042ad80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d1:99:f2:31:dc:17:6c:c3:f9:85:68:f3:88: 9c:87:f1:60:6a:a1:20:37:08:12:1b:32:22:f3:65: f8:ba:a9:1e:3b:c5:42:0c:ae:74:5c:6c:2f:9d:e7: 15:9d:db:02:ad:a0:0f:b8:37:1a:ae:97:82:71:62: d8:6c:40:e0:e2:c1:a7:97:68:40:71:44:42:af:2e: 10:76:8d:be:7c:61:37:96:b7:34:e4:9c:1c:68:86: 4d:66:8d:fd:fd:10:29:35:c5:f4:ba:91:29:30:6b: 52:32:90:42:6d:1d:a6:15:7b:7e:2b:40:69:3d:6e: e4:da:9c:6d:d4:52:db:64:4b:a2:32:f5:a0:56:46: 20:3d:22:24:b9:38:a0:36:66:fc:d0:9a:02:0c:c3: 8e:d7:fd:ba:a7:a9:1c:49:d9:00:ed:08:e6:1d:6e: f2:fa:7b:fc:06:f6:63:b3:bf:84:b8:6a:91:ba:a8: 9a:3d:7d:be:e2:71:51:9a:d1:e4:e3:9c:0d:a4:6d: e3:4c:81:6e:91:ce:4e:2d:d7:53:f0:28:9d:e1:4c: cb:2e:fd:c0:12:ad:7d:c7:09:84:fb:4b:1e:b0:de: 30:18:ce:0f:6c:8f:d4:96:21:dd:81:7e:c3:76:a0: a2:df:ea:c2:56:cf:f7:da:46:b4:68:db:94:ad:44: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:90:A0:17:1D:EA:C8:10:A8:E1:98:D8:F8:6A:60:D3:3D:03:AD:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/419e6335-6ee8-3c7f-842f-c26843e0a487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 199.1.64.0/23 199.1.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:6b:90:e6:14:d5:ee:cc:8a:3f:97:76:f3:aa:00:83:ad:50: 21:ba:e6:34:79:2c:db:2c:7d:f8:9a:6f:5b:c4:97:24:eb:8f: 50:7d:3a:69:10:e7:28:20:08:2d:45:fa:01:05:83:4d:af:93: 96:61:d1:78:ab:6d:f2:50:ce:23:c1:60:25:38:3a:65:40:8c: 3c:08:e3:e0:d7:ab:18:df:67:40:62:bb:5d:fd:02:e1:69:a8: a4:4b:2a:1b:51:f5:66:44:a0:9b:28:f0:36:99:fa:12:90:d3: ab:96:5c:bc:d3:29:c1:d3:d9:31:33:9b:7f:bc:ff:ac:3a:21: de:0f:fb:bf:81:b8:57:95:f8:aa:24:f8:3e:66:9a:64:85:0a: d9:24:d4:29:85:a0:65:76:5d:29:80:ca:63:bf:51:c2:9f:7c: cb:06:ff:7d:d5:d5:00:59:88:b2:4b:50:d7:9d:73:72:c6:b9: 4d:db:75:74:a4:d9:fe:96:f2:7b:21:8e:47:b3:29:85:88:3f: 6d:88:ad:f2:73:16:2f:da:cf:03:44:07:14:cc:6e:ac:6f:4f: af:88:a1:30:61:40:e1:35:dd:82:5d:c7:4e:43:c8:7d:b6:3e: ce:6b:a0:93:86:a5:89:40:43:c4:69:bf:11:3e:60:2f:93:5d: d4:3b:9f:73 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvc9eVaX4xdWd/AgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk NDM3MzQ2ZWQtZTc4ZC00NzViLWIzOTgtMDBkM2EwNDJhZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltGZ8jHcF2zD+YVo84ich/FgaqEgNwgSGzIi 82X4uqkeO8VCDK50XGwvnecVndsCraAPuDcarpeCcWLYbEDg4sGnl2hAcURCry4Q do2+fGE3lrc05JwcaIZNZo39/RApNcX0upEpMGtSMpBCbR2mFXt+K0BpPW7k2pxt 1FLbZEuiMvWgVkYgPSIkuTigNmb80JoCDMOO1/26p6kcSdkA7QjmHW7y+nv8BvZj s7+EuGqRuqiaPX2+4nFRmtHk45wNpG3jTIFukc5OLddT8Cid4UzLLv3AEq19xwmE +0sesN4wGM4PbI/UliHdgX7DdqCi3+rCVs/32ka0aNuUrUTSPQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNyQoBcd6sgQqOGY2PhqYNM9A63fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNDE5ZTYzMzUtNmVlOC0z YzdmLTg0MmYtYzI2ODQzZTBhNDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBxwFAAwQA xwFHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHprkOYU1e7Mij+XdvOqAIOtUCG65jR5LNssffiab1vElyTr j1B9OmkQ5yggCC1F+gEFg02vk5Zh0XirbfJQziPBYCU4OmVAjDwI4+DXqxjfZ0Bi u139AuFpqKRLKhtR9WZEoJso8DaZ+hKQ06uWXLzTKcHT2TEzm3+8/6w6Id4P+7+B uFeV+Kok+D5mmmSFCtkk1CmFoGV2XSmAymO/UcKffMsG/33V1QBZiLJLUNedc3LG uU3bdXSk2f6W8nshjkezKYWIP22IrfJzFi/azwNEBxTMbqxvT6+IoTBhQOE13YJd x05DyH22Ps5roJOGpYlAQ8RpvxE+YC+TXdQ7n3M= -----END CERTIFICATE-----Generated at Mon Nov 17 04:26:37 2025 by rpki-client